Skip to content

[Security] Make onAuthenticationSuccess Response optional #48288

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

db306
Copy link
Contributor

@db306 db306 commented Nov 22, 2022

Q A
Branch? 6.0, 6.1, and 6.2
Bug fix? yes
New feature? no
Deprecations? no
Tickets N/A
License MIT

Most authenticators currently use onAuthenticationSuccess with an optional Response. That's mainly due to usecases whereby we want to redirect specific users etc.

@carsonbot
Copy link

Hey!

Thanks for your PR. You are targeting branch "6.2" but it seems your PR description refers to branch "6.3 for features / 4.4, 5.4, 6.0, 6.1, or 6.2 for bug fixes ".
Could you update the PR description or change target branch? This helps core maintainers a lot.

Cheers!

Carsonbot

@db306 db306 changed the base branch from 6.2 to 6.0 November 22, 2022 17:03
@fabpot fabpot modified the milestones: 6.2, 6.3 Nov 23, 2022
@carsonbot carsonbot changed the title Make onAuthenticationSuccess Response optional [Security] Make onAuthenticationSuccess Response optional Apr 21, 2023
Copy link
Member

@nicolas-grekas nicolas-grekas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd merge this as a regular bugfix: in 5.4, returning null was allowed and handled by the code.
See #50092

@fabpot fabpot modified the milestones: 6.3, 5.4, 6.2 Apr 21, 2023
@fabpot fabpot changed the base branch from 6.0 to 6.2 April 21, 2023 11:44
@fabpot
Copy link
Member

fabpot commented Apr 21, 2023

Thank you @db306.

fabpot added a commit that referenced this pull request Apr 21, 2023
…(db306)

This PR was merged into the 6.2 branch.

Discussion
----------

[Security] Make onAuthenticationSuccess Response optional

| Q             | A
| ------------- | ---
| Branch?       | 6.0, 6.1, and 6.2
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT

Most authenticators currently use onAuthenticationSuccess with an optional Response. That's mainly due to usecases whereby we want to redirect specific users etc.

Commits
-------

1e95ac7 Make onAuthenticationSuccess Response optional
fabpot added a commit that referenced this pull request Apr 21, 2023
…Interface::onAuthenticationSuccess() (nicolas-grekas)

This PR was merged into the 5.4 branch.

Discussion
----------

[Security] Fix return type of AuthenticationSuccessHandlerInterface::onAuthenticationSuccess()

| Q             | A
| ------------- | ---
| Branch?       | 5.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

Relates to #48288

Note that callers of this method are already null-aware.

Commits
-------

7e35ba0 [Security] Fix return type of AuthenticationSuccessHandlerInterface::onAuthenticationSuccess()
@fabpot fabpot closed this Apr 21, 2023
@fabpot fabpot mentioned this pull request Apr 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants